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ABSTRACT: Last July, independent sales consultant Melissa McNatt was at 
r.oine browsing the Web when she happened upon a link that offered document 
s- oi arje at its site. NetDocuments has a Web-site format that resembles an 
.*n-] ine E-mail account. Now when McNatt goes on the road she takes her 
consulting customers with her. 

TEXT: Problem: Handling crucial files on the road 
Solution: A Web site for storing them 

Payoff: Bypassing the cost and security risks of laptops 

AS REGIONAL SALES DIRECTOR for a Web-based company, Melissa McNatt twice a 
week left her cat and her apartment in the San Francisco suburb of San 
Bruno to make sales calls in Southern California. On the side, McNatt 
moonlighted as an independent sales consultant, helping smallbusiness 
owners with everything from sales letters to telephone scripts. 

But with her PC firmly ensconced in San Bruno, McNatt faced a problem: how 
could she run her own business while she was on the road? "I was struggling 
with how to do it all firom my home computer," she says. 

Frequently, McNatt and her customers collaborated to develop sales letters 
or PowerPoint presentations. 

To communicate-whether from home or from a computer at an airport or the 
nearest Kinko ' s--McNatt relied on E-mail attachments, which sometimes led 
to technical complications. "You can't do a fast download of a PowerPoint 
file," she says. "And small-business owners are paranoid as bell about 
i^* • ir e: viruses." To satisfy her customers, she often had to resort to 
sr-;,j.;.nq printouts of drafts through the U.S. Mail-a time-consuming chore. 
Anci her lack of equipment on the road often hampered her wooing of new 
*:us*comers . If, say, she met a prospective customer in Los Angeles at a bar, 
she'd have to wait until the weekend to send a follow-up letter. "When 
you're selling, you want to close as fast as possible," she says, "before 
they get buyer's remorse." 

Then last July, about five months after she'd begun consulting, McNatt was 
at home browsing the Web when she happened upon a link to a company that 
offered document storage at its site. NetDocuments, in Orem, Utah 
(888-297-2736; www.netdocuments.com), has a Web-site format that resembles 
that of an on-line E-mail account. After registering and getting a 
password, McNatt found herself in the "NetDocuments Inbox Folder." From 
there she clicked on a link that gave her access to the site's tools for 
creating new folders and subfolders. Once she'd created the folders, she 
clicked on "Add new items to this folder," and a box containing all the 
files on her hard drive popped up. With her mouse she simply highlighted 
the files she wanted to import into the various folders she'd created on 
NetDocuments and hit "OK" for the upload to begin. 

Now when McNatt makes the trek south-or even to a local customer's office 
(she left her sales-director job in January to consult full-time) — she 
takes her consulting customers with her. From those same rentable 
computers, she logs on to NetDocuments not only to access her documents but 
also to share them with her customers through a feature called 
Met: Envelopes . NetEnvelopes works like - an E-mail in-box with editing 



capabilities. First, MoBJtt designates with whom shi^ants to share a 
document. Those parties receive an E-mail message telling them that the 
document is open and that they can log on at any time to view or edit it 
The only hitch is that to get into a NetEnvelope, the user must be 
registered with Net Document s and have a password. The site does, however, 
allow users to set up accounts for others: McNatt can register a 
customer ' s name and E-mail address, and that customer will receive a 
temporary user name and password to access the NetEnvelope. 

For $4.95 a month, users can get a premium service that gives them 100MB of 
storage space. McNatt, however, is satisfied with the 10MB she receives 
free. In addition to avoiding the costs of buying a laptop, she's built her 
own Web site without having co spring for the technology to make documents 
downloadable off the site. Visitors can learn about McNatt at her site 
(www.jumpstartsales.com) and go to NetDocuments to take advantage of her 
services once they've signed on as customers. And if she meets a 
prospective customer at a bar, she can walk down the street to Kinko's and 
personalize her best follow-up letter on NetDocuments in minutes. "Now my 
sales cycle is two days, whereas before it was seven or eight," she says. 
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PROBLEM TO BE SOLVED: To 
one- time password. 



ABSTRACT 

provide a new authentication system using a 



SOLUTION: In stead of providing a user authentication server device 5 in an 
pn:er prise using a one - time password , a one - time password 

generating server device 11 for issuing the one-time password is provided 
i. :ie the enterprise such as a radio communication esterblishment side to 

■< niicjure an authentication system. The server device 11 specifies a user 
r: rt sed on the owner information of a cellular phone 14 owned by the user to 
issue the one-time password for the enterprise, the server device 5 

generates the one - time password by using the same program as that 
of the server device 11 . and authenticates . the user by checking the 

generated one - time password against the one - time password 

transmitted from the user. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a transaction authenticating method, a 
transaction authenticating system, and a transaction authenticating program 
capable of preventing an illicit demand by a third person, and capable of 
realizing smooth electronic commerce. 

SOLUTION: A user A places an order, and a person to be used B accepts an 
order (PI and P2 ) . An authenticating institution C performs personal 
authentication on the basis of an authenticating request (P3 and P4 ) , 
generates a onetime password , and sends the password to the user A 
and the person to be used B (P4 and P5) . The person to be used B informs 
the user A of acceptance of transactions, and sends a transaction 
authenticating request including the onetime password to the authenticating 
institution C (P6 and P7 ) . The user A confirms the content of a transaction 
acceptance notice (P8), and sends a transaction authenticating request 
incliding the onetime password to the authenticating institution C (P9) . 
The authenticating institution C compares the onetime passwords -included in 



the transaction authenticating requests received from ™ user A and the 
oerson to be used B, and executes transaction authenticating processing 
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ABSTRACT 

PROBLEM TO BE SOLVED: To allow a portable terminal to authenticate with one 
time password for either authentication server without causing a plurality 
of authentication servers to synchronize data of a user. 

SOLUTION: A portable terminal 2 generates one time password . Along 
with the one time password , a previous one time password for 

'. 'i.iin, which is encoded by an encoding method capable of decoding only with 
authentication server 1, is transmitted to the authentication server 1. 
T:\e authentication server 1 operates to find the previous one time password 
;: rom the received one time password. Furthermore, the previously encoded 
one time password is decoded, and the authentication processing is executed 
depending on whether the operated one time password is matched with the 
decoded one time password. 
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i\LEM TO BE SOLVED: To 
.■riicjl authentication. 



ABSTRACT 
provide a 



method for improving precision in 



."uLUTION: An authentication means of a prestage generates a one time 

password and the password is inputted by dynamic authentication in a 
post-stage authentication. It is possible to realize remarkably precise 
authentication compared with the case of combining the respective prestage 
and post-stage and the case of combining these simply. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To display a one-time password on a portable 
telephone installed with JAVA. 

SOLUTION: The one-time password authentication system is provided with a 
means for generating JAVA program for displaying a one - time password 
for a user on the screen of a JAVA portable telephone terminal based on a 
one - time password display program generation request from the 

r^pvanc user, a server for JAVA program download for preserving the JAVA 
ft! 'jTiram received from a sending means for JAVA program for a fixed period, 
::oLe rinining the user corresponding to the download request from the user 
portable telephone and sending the correspondent JAVA program to that 
portable telephone, a means for reporting that the relevant JAVA program 
can be downloaded to the user after the program generation request from 
this user, and a means for initializing a one-time password display program 
on the JAVA portable telephone by a negotiation with a master managing 
device for the one-time password. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a one - time password generator that 
can make retrieval of an encryption key and a count on the basis of 
generating a one - time password much more difficult in the case of 
employing the one-time password by a counter synchronous system. 

SOLUTION: A random number generating section 38 in the one - time 

password generator generates a random number that is kept within a 

range smaller than a count M being a permissible count range when an 
authentication server 4 authenticates a password. A counter 33 advances its 
count according to the random number generated by the random number 
generating section 38. A one - time password generating section 34 
uses an encryption key from an encryption key storage section 32 and the 
count from the counter 33 for parameters to conduct encryption processing 
and to generate a one - time password . Then the continuity of counts 
on che basis of the one-time password is "lost and the interval of counts is 



made at random. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide an information processor and a storage 
medium (medium) for arranging an environment for enabling one user to 
utilize only one piece of software or digital contents at one piece of 
terminal equipment, more surely protecting the right of an accepter side 
and enabling an accepted person to receive service suited to individual 
needs from a software maker or a contents provider. 

SOLUTION: The medium 101 provided with areas 103 and 104 writable only once 
and the recording area 102 of the software and a microprocessor 118 
; r.corpora cing a generation unit 112 for generating a one - time 
password for which the same one can not be generated twice and a 
• i phe ci nq/deciphering unit 108 cooperatively function. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a system and a method for authentication, 
which uses a one-time password easy to utilize for a user at a low cost. 

SOLUTION: A user identification number, which is inputted by a user, 
: * - vj 1 i a r for the user is acquired throuqh a network, the one-time password, 
. ■* \ :i eifective just once, is generated and a resource provider 
!.*. l:. ies the user f rom the user identification number acquired through 
network and the one-time password. Besides, the user is made input a 
I ossword number together with the user identification number and in the 
case of generating the one - time password , the user identification 
number and the password number are mutually collated. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To reduce unauthorized use of ciphering information 
by making the ciphering information complex by specifying a terminal to be 
used as well . 

SOLUTION: In this information presentation assisting method, information 
acquisition information including a user ID21 and a one - time password 
creation program 22 is distributed from the server side 20 to the client 
: ;., : ^ based on information acquisition application when the information 
i ■ :•: i i '* ion application is performed from the client side 10 to the server 
. , ,:0. A one - time password 24 is automatically generated based on 
• information acquisition information and information including the 

one-Lime password 24 is transmitted to the server side 20 on the client 
side 10. A client terminal and a client are simultaneously specified by 
deciding coincidence between its own present one-time password 24a and the 
one-time password 24 from the client side 10 on the server side 20. And 
when propriety is confirmed by specification of them, information 
presentation service aiming at a specified user is performed. 



COPYRIGHT: (C) 2001, JPO 



10/5/15 (Item 15 from file: 347) 

DIALOG (R) File 347: JAPIO 

(c) 2004 JPO & JAPIO. All rts. reserv. 

06364531 **Image available** 
QUALIFIED PERSON DECISION DEVICE 



PUB . NO.: 11-306141 [JP 11306141 A] 

PUBLISHED: November 05, 1999 (19991105) 

INVENTOR(s) : MOCHIZUKI KEIICHI 
APPLICANT (s) : NEC ENG LTD 

APPL. NO.: 10-113921 [JP 98113921] 

FILED: April 23, 1998 (19980423) 

CLASS: G06F-015/00 ; G09C-001/00; H04L-009/32 

ABSTRACT 

PROBLEM TO BE SOLVED: To keep secrecy more securely through client 1 s easy 
operation . 

SOLUTION: A random number generated by a random number generation part 43 
on the side of a host computer 5 as a qualified person decision device at a 
decision request is reported to a client terminal 10 through a telephone 
line, the password of a client is ciphered by using the same random number 
and the same ciphering system by EX-OR parts 23 and 45 and data encoding 
parts 24 and 4 6 on both sides of a client computer 20 and the host computer 
50 to generate a one - time password ; while the one - time 

password is stored in a one - time password table 52, the one-time 
password is sent to a password reception part 54 through a data line 
different from the telephone line through -which the- random number was 



reported to gather thePcn the host computer 50, and a 3^ra matching part 
55 confirms matching between the both to decide the qualified person. 
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KR 2003022568 A G06F-017/00 

Abstract (Basic): WO 200323643 Al 

NOVELTY - The security identification creation method is designed 
to work within a communications network with a number of users. 
Initially, it receives the necessary conditions needed for creation of 
identification information within the network (108). This condition 
information is then used to create the necessary identification objects 
for each user (106). The creation condition information relates to 
details of the would be user, such as age. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for the 
system for creating a user ID. 

USE - For managing and creating security profiles for users on a 
network . 

ADVANTAGE - The method provides a way to create and manage 
temporary user ID's with the minimum of effort. 

DESCRIPTION OF DRAWING (S) - The figure shown is a block diagram 
showing the method in operation within a network. 

User (106) 

Agent (108) 
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Abstract (Basic): JP 2002278929 A 

NOVELTY - A portable terminal (10) sends a request for one - time 
password generation program module, to a web server (30) . A 
password management server (20) produces the password generation 
program module based on request from the web server and outputs it to 
the web server. The web server converts received password generation 
program module into a binary coded format depending on the request from 
the portable terminal. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) One - time password generation program module circulation 
met hod ; 

(2) Portable terminal; 

(3) One-time password management server; 

(4) Web server; and 

(5) Recorded medium storing program for circulating one - time 
password generation program. 

USE - For network user authentication. 

ADVANTAGE - The one - time password generation program module 
provides efficient user authentication and improves security. Avoids 
installation and management of special hardware and software for 
preparing the one-time password program, thereby reducing complexity in 
the portable terminal. 

DESCRIPTION OF DRAWING { S ) - The figure shows a schematic view 
illustrating circulation process of the one - time password 
generation program module. (Drawing includes non-English language 
text) . 

Portable terminal (10) 
Password management server (20) 
Web server (30) 
pp; 13 DwgNo 10/11 
Title Terms: ONE; TIME; PASSWORD; GENERATE; PROGRAM; MODULE; CIRCULATE; 
SYSTEM; USER; AUTHENTICITY; ONE; TIME; PASSWORD; GENERATE; PROGRAM; 
MODULE; BINARY; CODE; FORMAT; DEPEND; REQUEST; PORTABLE; TERMINAL 
Derwent Class: T01 

International Patent Class (Main) : G06F-015/00 

International Patent Class (Additional): G06F-012/00 ; G06F-012/14 ; 

K04L-009/32 
. ; ..■ Seomen t : EPI 



10/5/21 (Item 5 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

014858739 **Image available** 

WPI Acc No: 2002-679445/200273 

Password security system for preventing conventional computer from 
hacking and mechanical security device using input time gap between each 
character information of password 

Patent Assignee: MOON G (MOON-I); YUN H (YUNH-I); YOON H (YOON-I) 

Inventor: MOON G; YUN H; YOON H 



Number of Countries: OOl^Wumber of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

KR 2002034379 A 20020509 KR 200064603 A 20001101 200273 B 

KR 399194 B 20030926 KR 200064603 A 20001101 200416 

Priority Applications (No Type Date): KR 200064603 A 20001101 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
KR 2002034379 A 1 G06F-001/00 

KR 399194 B G06F-001/00 Previous Publ . patent KR 2002034379 



Abstract (Basic): KR 2002034379 A 

NOVELTY - A password security system for preventing a conventional 
computer from hacking and a mechanical security device using an input 
time gap between each character information of a password is provided 
to simply maximize the security of the security device by examining the 
input time gap between each character information of the password as 
well as the inputted characters. 

DETAILED DESCRIPTION - The password security system comprises a 
comparator ( 14 ) comparing the sequentially inputted password with the 
scored password, a permanent password storage (12) capable of changing 
and scoring the password, a memory selector (23) transferring one output 
selected from the permanent password storage and a temporary 
storage (2 1 ) , a time generator (15) acquiring the time information 
between the characters of the password, an oscillator ( 16) generating an 
operation clock of the system, a memory input selector (22) 
alternatively mixing the inputted character and the time information, 
an input signal storage (13) generating a signal analysis and the input 
data from a key pad input (18), an LCD character generator ( 1 9 ) , a key 
signal generator ( 20 ) , and a security system function controller ( 1 1 ) . 
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Abstract (Basic) : US 200^^66042 Al 

NOVELTY - Information in an IC card (4) read by a customer mobile 
terminal (1) and corresponding personal identification number { PIN) are 
transmitted to an authorization server (22) for verification of the 
customer identity. After verification, a settlement server (41) issues 
a temporary password to the mobile terminal. The password and current 
transaction information are simultaneously input in a business 
establishment terminal (30) for a transaction satisfying the settlement 
conditions . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for card 
settlement system. 

USE - For settlement of transactions in business establishments 
such as purchase price, dining charge, service usage charge, etc., 
using cards e.g. IC card which are read by mobile terminals such as 
mobile telephone, PDA. 

ADVANTAGE - Improves security and convenience in transactions, 
since card information are transmitted from ones own mobile terminal 
and by the provision of temporary password to settle transactions. 
Simultaneous connection from several customer terminals is enabled. 
Hence, number of devices of the settlement terminal in the business 
establishment is reduced and shortening of the waiting time for 
settlement is achieved. 

DESCRIPTION OF DRAWING (S) - The figure shows a configuration of the 
card settlement system. 

Mobile terminal (1) 

IC card (4) 

Authorization server (22) 

Business establishment terminal (30) 

Settlement server (41) 
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Abstract (Basic) : JP 2001216222 A 

NOVELTY - A database (Dl) stores the information regarding a 
registered user, including identifier, mail address etc. A judging unit 
(13) determines whether the perusal person is registered based on the 
information stored in the database. When the user is judged to be 
unregistered, an issue section (14) provides temporary password for 
document perusal. 

USE - For production or circulation of electronic documents - - 



(E-documents) througi^^lect ronic mail (e-mail) cornmunJWrtion . 

ADVANTAGE - Integrates persons not belonging to a system management 
temporarily and allows perusal of the document without any prior 
registration. Hence provides flexible workflow and also reduces delay 
in work flow due to registration. 

DESCRIPTION OF DRAWING ( S) - The figure shows the block diagram of 
work flow control system. (Drawing includes non-English language text). 

Judging unit (13) 
Issue section (14) 
Database (Dl) 
pp; 8 DwgNo 1/10 

Title Terms: WORK; FLOW; CONTROL; SYSTEM; ELECTRONIC; DOCUMENT; PRODUCE; 

TEMPORARY; PASSWORD; DOCUMENT; UNREGISTERED; USER 
Derwent Class: T01 

International Patent Class (Main) : G06F-013/00 
International Patent Class (Additional): G06F-019/00 
File Segment: EPI 



10/5/27 (Item 11 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 
' "Tl Thomson Derwent. All rts. reserv. 

<j ^ ; Image available"' 4- 

at: A*.-.- No: 1996-022039/199603 

:-TTT'. Acc No: N96-018293 

Secure authentication method for computers - involves second computer 
receiving user identity from first computer and if authenticated 
generating and sending encrypted one - time password to first for 
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Abstract (Basic) : EP 686905 A 

The authentication method involves providing a first request from 
the first to the second computer which includes a user identification 
code identifying a user of the first computer. The second computer 
determines if the user identification is authorised. If so the second 
computer generates a random number and stores it as a one time password 
and encrypts it. 

The second computer sends the first computer the one time password. 
The first computer decrypts the password and provides to password to 
the second computer. The second computer compares the received 
decrypted password with the stored password to authenticate the use or 
otherwise . 

ADVANTAGE - Provides improved method and apparatus for user 
authentication in network environment-, between client computer, - 



workstation and remot^^desti nation server. 
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. . . having as many programming services and Internet guides linked to 

TelVue' s ordering technology as possible," says Joseph Murphy, Executive 
7: re-President , TelVue Corporation. 

'able customers register for PPV Internet ordering with TelVue 
: . -n automated 800 telephone number (Cable: 1-800-7 50-6565, Dish: 

- \*\ --r<" 7 3) from their home phone one time and entering a six-digit 
" passcode . " This "passcode" can be used on any participating website. 
Wr.t :; ■■jdbi.e customers visit the Broadway Television Network website they are 
able to "click" on a... 

...a theatrical event. The customer types in his telephone number and his 
"passcode," which is sent over the Internet to TelVue Corporation. TelVue 
validates the customer as a registered user and identifies the 
customer 's cable company in its database. The order is then forwarded to 
the appropriate cable company over a dedicated data link. The cable 
company processes. . . 
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. . . che parties expect to reach agreement on a longer term contract for 

HOB no ciner future PPV events through TelVue 's services to HOB Website 
visitors . 

HOB Website users who are cable or satellite customers will 
register with TelVue by calling an automated 800 telephone number one 
time and entering a six-digit passcode . When cable or satellite 
customers visit the HOB Website they are able to "click" on a button and 
bring up an order page for a boxing PPV event. The customer types in his 
telephone number and his passcode, which is sent over the Internet to 
TelVue. TelVue validates the customer as a registered user and 
identifies the customer ' s cable company in its database. The order is 
then forwarded to the appropriate cable or satellite company over a 
dedicated data link. The cable... 
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... events on their TV sets. TelVue provides this connection to over 

700 cable systems and direct broadcast satellite providers reaching almost 
16 Million homes. 

Cable customers register with TelVue by calling an automated 800 
' ^l^phone number one time and enter a six-digit M passcode This 
"l :.~s ^cde M can be used on any participating website. When cable customers 
■ . WCW website they are able to "click" on a button and... 

. ..irV wrestling event. The customer types in his telephone number and his 
"passcode" which is sent over the Internet to TelVue Corporation. TelVue 
validates the customer as a registered user and identifies the 
customer ' s cable company in its database. The order is then forwarded to 
the appropriate cable company over a dedicated data link. The cable company 
processes . . . 
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... factor' authentications, such as passwords and user IDs. In 

addition to verifying users by 'what they know' (i.e., a password), this 
method also validates users by 'what they have' (in this case an Internet 
AccessKey registered specifically to them) . 

When users want access to the system, they first input their 
password. The bank then generates a random number known as a challenge, 
which in downloads to the user. The user then inputs this number into the 
token device. The microprocessor on the device calculates a one - time 
password , known as a response, that is unique to the user as well as to 
that particular sign-on session. The user views this number on the device 
and then types it into the computer. By combining the user ID with the 
one-time response that verifies possession of the token registered to 
that user , the bank can accurately determine users by two factors - by 
what they know and what they have. 

A unique feature of Vasco's Internet AccessKey is the manner in which 
the. . . 
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. . . TelVue' s ordering system, which is connected to more than 700 cable 

.systems and direct -broadcast satellite providers reaching close to 16 
it. L 1 : ion homes . 

"Cable customers register for PPV Internet ordering with TelVue 



by calling an automated l^fl-free number one time and^PFtering a 

six-digit pass code . 

TelVue previously arranged to accept World Championship Wrestling 
PPV-event orders over the Internet. 
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RSA upgrading its Keon PKI security software; Keon package now supports 
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. . . certificate system, and plans to use its system for transferring 

funds in the future as well as providing secure Web access, Smith says. 
Using a one - time password sent through old-fashioned registered 
mail, users can then register online to download certificates from 
EasCorp.'s Keon server. 

RSA says Keon 5.5 expands the options for certificate registration 
by letting users authenticate to an NT LAN. 

"This allows customers to take advantage of existing 
authentication environments," Liberty says. 

Once authentication is completed, the Keon 5.5 server could automate 
the download of the digital... 
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. . . does not publicize for security reasons. 

When a physician signs up to participate in the program, the hospital 
mails the user a letter containing a one - time password that will 
enable him to register , download a digital certificate for security from 
the hospital's Web server, and establish a personal identification number 
linked to the digital certificate, explains Steven... 

...s uses the company's WebFort authentication software, which is 
integrated with IDX's OutReach application that's stored on the Web server. 

Once the registration steps are completed, the physician then 
enters a user ID and personal identification number to access the Web 
server housing the IDX application and Arcot authentication software. If 
the user enters the correct PIN... 
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Bank finds gold with Web system 
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... certificate software from Entrust Technologies, Inc. in Richardson, 

Texas. Customers must call the bank, answer several questions to prove 
•:heir identity and receive a special one - time password . The customers 
■:so * hac password when they set up the software, entering it into the 
: -,r;'.r;s: security software and not their browsers. 

Artier the password is validated and a user connects to Scotia Online, 
special encryption keys are exchanged between the bank and the user's PC. 
The bank then issues certificates, and users can choose their own 
passwords for subsequent sessions. The entire registration and setup 
process was designed to take about 15 minutes. Users then connect to the 
Web site via their usual browser. 

SECURITY CONTROL 

Scotiabank, one of Canada's largest financial institutions, initially 
tested a banking system. . . 
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. . . her PC to get onto an intranet server, for instance, providing his 

or her account name and password sequence. If the voice matches the one 
registered in the Verivoice database, the user is in. There is no PIN , 
. .s: c: one - time access code if your voice matches up. 
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. . . and that they can log on at any time to view or edit it. The only 

hitch is that to get into a NetEnvelope, the user must be registered 
with NetDocuments and have a password. The site does, however, allow users 

to set up accounts for others: McNatt can register a customer 's name 
and E-mail address, and that customer will receive a temporary user 
name and password to access the NetEnvelope. 

For $4.95 a month, users can get a premium service that gives them 
100MB of storage space. McNatt, however, is... 
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LANGUAGE: English 



issued by the Kerberos Authentication Server. Secret information, 
such as a password, that only an authorized user would know, is contained 
in the ticket. 

Each user 's initial password has to be registered with the 
authentication server. The registration procedure depends upon the number 
of users . In person registration provides the best control if the 
number of users is small. Other procedures, such as using a login program 
on a trusted system, may be used when there are many users. 

Several tools can enhance the security provided by Kerberos. One - 
time passwords generated by devices are particularly useful. Kerberos 
'innnoi: protect against a hacker guessing or stealing user passwords . 
Onetime passwords eliminate that problem. Commercial products are 
■yni iabJe. Chac combine one - time passwords with Kerberos. 

FIREWALLS 

Firewalls are frequently used to overcome some problems of route and 
packet filtering. The firewall is a buffer between an organization's... 
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LANGUAGE: English RECORD TYPE: Fulltext 

WORD COUNT: 84 6 LINE COUNT: 00078 

... investors can request for this valuable service." 

To access real-time quotes, visitors to Wall Street City are asked to 
sign up and select a password . The one - time registration is 
required by the stock exchanges, and visitors to the website do not have 
to be Wall Street City subscribers to use the service. 

The introduction of unlimited real-time quotes on Wall... 



17/3, K/13 (Item 4 from file: 148) 

0 i A LOG ( R) File 148:Gale Group Trade & Industry DB 
[r)2i)0A The Gale Group. All rts. reserv. 

09709956 SUPPLIER NUMBER: 19728172 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Perle Systems and AXENT Technologies Team to Deliver Superior Network 
Security to the Perle 833 Remote Access Server. 

Business Wire, p9080202 
Sep 8, 1997 
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... or remotely. Working in tandem with the OmniGuard/Def ender Security 

Server is the Defender Software token. This hand-held token prompts the 
user for a PIN and then provides a unique one - time password that 
ensures only authorized users gain access to the LAN. 
Software Availability 
All Perle 833 Remote Access Servers will come enabled with AXENT 1 s 
OmniGuard/Def ender authentication software. Registered 833 users can 
obtain this new" functionality today. Customers wishing to upgrade are 



directed to call Perle T^Riical Assistance Center toll-f^Jat 1-800-33 
PERLE to order the software. They can then... 
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... , bug existed that forced users to re-enter user names and 

: -jsywor'is in order to move from page to page in Web sites requiring 
regxstration . Usually, users enter their passwords only once and the Web 
browser creates a temporary cache to store the passwords for the 
remainder of the site navigation. 

A major article by Robert E. Calem on the problem ("Microsoft 
Acknowledges Bug in New Explorer 3.0") appeared in The New York Times' 
CyberTimes section of the Times' own Web site. The New York Times' Web site 
requires registration , though charging no fees to U.S. readers. 

The repeated-password problem appeared sporadically, affecting some 
registration sites and not others. However, some of the affected 
registration sites included sites run by Microsoft marketing partners, 
according to reports confirmed by Microsoft's public relations agency. To 
'enuice users to Internet Explorer 3... 
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...TEXT: These use non- repeatable information, which is used only for a 
single authentication exchange. This class of authentication mechanisms 
includes the use of automatically generated one - time password (e.g. 
the S/Key system), the use of time-stamps in conjunction with the password, 
and multi-exchange challenge-response schemes. These mechanisms all require 
the secret information to be available to the server which is 
authenticating the user , so that registered and tendered information 
may be compared. This imposes some constraints on the server in terms of 
the security that it must provide. 
3 . 5 Strong . . . 
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...TEXT: and that they can log on at any time to view or edit it The only 
hitch is that to get into a NetEnvelope, the user must be registered 
with NetDocuments and have a password. The site does, however, allow 
users to set up accounts for others: McNatt can register a customer ' s 
name and E-mail address, and that customer will receive a temporary 
s ^ r name and password to access the NetEnvelope. 

: CA.5b a month, users can get a premium service that gives them 100MB of 
s* Traqe space. McNatt, however, is... 
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...TEXT: another to use other American travel services, Samuel said. This 
system will be replaced with a single sign-on procedure that involves 
issuing users a temporary personal identification number online and 
sending a permanent one via the mail. 

With the overhaul of its 2year-old Web site, American is trying to learn 
more about the people visiting the airline online. American's Web site 
already gets 23 million page views per week and has 1.6 million people 

registered to receive weekly e-mail updates about ticket prices. American 
sees electronic commerce as its direct flight to future growth, even though 
the $14 0 million .. . 
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...TEXT: card. The number on the card changes every minute -recalculated by 
an algorithm that runs on a chip embedded in the card - to provide a one - 

time password . Because the algorithm uses the serial number of the card 
ir. .ins calculations, and each serial number is registered to an 

individual user , the algorithm produces a unique code for each card. To 
authenticate the user, the Nortel . Access server runs the same algorithm, 
and the card- and. . . 
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...TEXT: The AR structurS^Ps a primary distinguishing chaUPberistic of the 

TIS CKR system. A DRC interprets an AR structure automatically. 

ARs are defined by the user , during an initial registration phase (or 
over time, as conditions dictate. Any one user can have any number of ARs 
defined, to represent different sets of people or conditions for emergency 
access to different data. However, it is anticipated... 

...number of ARIs to actually use in DRFs . 

An AR can be one of four different types: 

1. A direct personal identification (such as a password , onetime 

password , or public key signature verification which can be 
checked directly between the person and the DRC over a secure channel. 

. An indirect personal identification... 
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providing 
matches the 

There is no 
up. 



. . . her PC to get onto an intranet server, for instance, 

his or her account name and password sequence. If the voice 
one registered in the Verivoice database, the user is in. 
PIN , just a one - time access code if your voice matches 
Copyright 1997 CMP Media Inc. 
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...or remotely. Working in tandem with the 
OmniGuard/Def ender Security Server is the Defender Software token. 
This hand-held token prompts the user for a PIN and then provides a 
unique one - time password that ensures only authorized users gain 
o-:cess co the LAN. 
.Software Availability 

Ail Perle 400/RAS Remote Access Servers will come enabled with 
AXENT ' s OmniGuard/Def ender authentication software. Registered 400/RAS 

users can obtain this new functionality today. Customers wishing to 
upgrade are directed to call Perle' s Technical Assistance Center 
toll-free at 1-800-33 PERLE to order the software. They can... 
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(1) Only the electronic card in accordance with... 
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and/or purchased by the 
client /customer ; 

(b) Accepting requests from client manager nodes to create client user 
accounts, including generating one - time passwords for enabling 
client users to join pre-subscr ibed user groups of the virtual storage 
device... to the client manager node. Next, in step S 1 08, the client 
manager node creates a one time password ("OTP"). Preferably, the 
OTP is a bidirectional encryption/decryption key. In addition, the client 
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. . . Instant Message -- practices D'Amato called "crude" -- AOL put the 
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At one time , Trojan Horse password sniffing programs were also 
being sent to AOL members by scammers, Newsbytes notes. 
In general . . . 
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systems, systems on a LAN. . . 
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. . . Systems 

+ "I'll be looking for good Internet security software. Also, secure 
firewalls, authentication, secure E - mail programs, one - time 
password products. I'll also be looking for new ISDN service and routers 
for the small . . . 
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... an extra layer of security to protect your private email from being 

accessed by malicious email attackers. By simply requiring the user to 
supply the correct one - time password before they can access the 
Exchange server logon page, the server's security is guaranteed... 
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... access (RAS and RADIUS), Internet access through firewalls, 

securing web pages and signing and encrypting e - mail . ActivCard Gold 
can manage and control digital signatures, one - time use dynamic 
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network access. 

ActivCard Gold is the client... 
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... users to set up accounts for others: McNatt can register a 

customer's name and E - mail address, -and that customer will receive .a- 



l^^^ssword to access the NetEnve^^^ 



temporary user name and 

For $4.95 a month, users can get a premium service, 
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...TEXT: users to set up accounts for others: McNatt can register a 
customer's name and E - mail address, and that customer will receive a 
temporary user name and password to access the NetEnvelope. 

For $4.95 a month, users can get a premium service... 
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...TEXT: applications. So use a proxy server on the front end to handle 
security. Employ an e - mail -based password system that allows end-users 
to have a temporary password sent to them should they forget theirs. 
Have the proxy server connect to a Web... 
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...an extra layer of security to protect your private email from being 
accessed 

by malicious email attackers. By simply requiring the user to supply the 
correct one - time password before they can access the Exchange server 
logon 

page, the server's security is guaranteed... 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a method and a device for preventing 
unauthorized access to a restricted item by using a cellular telephone that 
has been previously associated with a user, for example, during a 

roq 1 s t ra t ion process. 

SOLUTION: The user is initially identified, for example, by entering a 
password , and a one - time pseudo-random token is provided to the 
user by using a first communication channel. The user is requested to dial 
a telephone number associated with an access control service by using a 
cellular telephone that has been previously associated with the user and to 
enter the assigned token. The user obtains access to the restricted item if 
the assigned token is entered from a cellular telephone having a serial 
number that has been previously associated with the particular user. 



COPYRIGHT: (C) 2003, JPO 



16/5/5 (Item 5 from file: 347) 

DIALOG ( R ) File 347: JAPIO 

(c) 2004 JPO & JAPIO. All rts. reserv. 

07473767 **Image available** 
INFORMATION-ISSUING SYSTEM 



PUB. NO.: 2002-342285 [JP 2002342285 A] 

PUBLISHED: November 29, 2002 (20021129) 

INVENTOR(s): FURUTA SATOSHI 

APPLICANT (s) : NTT DATA CORP 

APPL. NO. : 2001-149920 [JP 2001 14 9920] 

FILED: May 18, 2001 (20010518) 

INTL CLASS: G06F-015/00; G06F-017/60; H04L-009/32; H04M-011/00; 
H04Q-007/38 



ABSTRACT 

PROBLEM TO BE SOLVED: To provide an information issuing system, capable of 
improving security, and easily collecting and issuing necessary 
information . 



SOLUTION: A user management terminal 3 conducts authentication processing, 
based on authentication information transmitted from a portable telephone; 
and when the authentication is established, the user management terminal 3 
issues an one - time password being information for executing 
authentication for receiving the permission of the issue of information to 
the portable telephone. Then, the issues one - time password and the 
identification information of the portable telephone being the target of 
the issue of the issued one - time password are stored to be made 
to correspond to each other; the identification information and one - time 
password issued from an issuing terminal are received; the 
-aurhent ica-rion- - processing- - is - executed, - based on -the— temporarily- -stored- 



information; and when ^Pie authentication is establishel^r the issuance of 
the information is permitted. 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide a mobile portal site to assist a business 
model of contents distribution type print service by a network by which 
places for information request and for receiving print service are not 
restricted . 

SOLUTION: This portal computer 2 is provided with a portal site function 
regarding the print service such as to set a portal page in a menu form, to 
display the portal page for the print service on a portable terminal 3 to 
which access is made via a communication common carrier 1, to accept the 
:es': concents of the print service from the portable terminal 3 and to 
issue a one - time password for confirmation of print reservation in 
crtim to indicate the contents of the print service to be provided by an 
information provider 4 and a marketing company 5 connected with the 
Internet S to the portable terminal 3 and a contents distributing function 
to distribute the contents and the print specification contents, etc., to a 
print station 6 according to the contents of print service request of a 
user who made the print reservation. 
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ABSTRACT 

i-^OP.LLiM TO BE SOLVED: To provide a fast and highly reliable authentication 
system and also to provide an inexpensive authentication device. 



SOLUTION: An authentication device 3 manages a user password request/ 
notification function for a user, issues a temporary password against 
a connection request of the user and notifies a user PHS terminal 1 and a 
remote" connection device 4 of the temporary password. The device 4 accepts 



:.::t^iicn request fJWR a user PC 2 based on the temp^Plry password and 
: • : : - r;us *che remote connection of a normal user or an inquiring user to an 
.1 j-.r.eniicacion device 3. The PC 2 performs connection to the device 4 based 
on che temporary password. The network service 5 is the network resources 
with which every user enjoys the service. 

COPYRIGHT: (C) 2000, JPO 



16/5/26 (Item 4 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2004 Thomson Derwent . All rts. reserv. 

014955381 **Image available"-* 

WPT Acc No: 2003-016395/200301 

XRPX Acc No: N03-012315 

On-line shopping service providing method through telephone network, 
involves confirming user using temporary password , to provide 
article information retrieved based on purchasing conditions 
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Abstract (Basic) : US 20020112169 Al 

NOVELTY - A temporary password and purchasing conditions are 
received from a user through telephone connection. Article information 
based on the purchasing conditions, are retrieved. Telephone connection 
is set to the user and the user is confirmed using the temporary- 
password . The retrieved article information is provided to user and 
a transaction is arranged according to user's selection. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for on-line 
shopping service providing system. 

USE - For providing on-line shopping service through telephone 
network . 

ADVANTAGE - Provides a safe and convenient telephone shopping 
service by using a purchaser's originator telephone number and a 
temporary password. Achieves high security, since authentication 
information is valid for only a single transaction. Reduces purchaser's 
waiting time and telephone charge. 

DESCRIPTION OF DRAWING (S) - The figure shows a schematic diagram of 
telephone shopping service providing system. 
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Abstract (Basic) : KR 2002000961 A 

NOVELTY - A radio authentication method using a mobile 
communication system is provided to ensure a reliable security against 
a hacking by using a one-time password and relieve a financial burden 
of a system provider and a user by allowing them to use their mobile 
phone without purchasing an HHC(Hand Held Calculator) for calculating 
the existing one-time password. 

DETAILED DESCRIPTION - A user is connected to an external 
authentication service provider with a mobile communication terminal. 
The external authentication service provider transmits a one - time 

password to the connected user. The external authentication service 
provider connects to a system through a wire to transmit the one-time 
password. The user is connected to the system with the one-time 
password received from the external authentication service provider. 
The system checks the password transmitted from the external 
authentication service provider and the user password and allows a 
connection authentication to the connected user. 
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Abstract (Basic) : EP 1186984 A2 
. NOVELTY - .An- authent ication -ser-ver. -(-3-)- requests, f or transmission, .of . . 



(2) which is prov 



m 



d in an IC card removable fro] 



er terminal (1) 



; r. response to the connection request from the terminal connected to a 
rework (6). The authentication is performed according to the pass/fail 
xesuic of verification of the transmitted ID. 

USE - For authenticating user performing electronic shopping 
through a network using communication terminal e.g. portable phone, 
PHS, PDA, and set top box. 

ADVANTAGE - Key input of the personal information from the user 
terminal is avoided, as authentication is performed by verifying ID 
which is individually set in each user terminal. Hence personal 
information is protected from being revealed by a third party and 
security of the information is ensured. Since the need to issue 
temporary passwords is eliminated, the costs for security measures 
are reduced. 

DESCRIPTION OF DRAWING { S ) - The figure shows a block diagram of the 
authentication system. 
User terminal (1) 
ID (2) 

Authentication server (3) 

Network (6) 
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